SSL VPN
Reply
Visitor
Rameshsivaraman
Posts: 2
Registered: ‎08-31-2008
0

Clustering

We have SA 2500 2 nos in the primary site and one SA 2000 in the DR site - can we cluster all the three boxes together - if so what is the solution/design

 

 if not can i move the existing user lic of SA 2000 to one of the box in primary site , that is SA 2500 - because we have procured only one lic for the SA 2500box

 

incase of teh SA 2500 box both failing - shall we manualy change the lic to the SA 2000 in the DR 

 

Kindly reply

 

rgds

 

Ramesh Sivaraman

Trusted Contributor
Mrkool
Posts: 252
Registered: ‎02-28-2008
0

Re: Clustering

the juniper lic are tied to the hardware id of the device. so you can not move the lic from the 2500 to the the DR site. and from what it sounds like you have a cluster only lic for your 2000 so you can not use that box independently without a master lic.

 

You can cluster all three of them. You can add the 2000 as a seoncary / passive device and change the cluster option to do not sync log. in active passive the user state info is transfered between the primary and all the hosts so depending on your connection between prod and dr this might not be a viable solution. 

 

In your case i would suggest getting another license for the 2000 so that it is a priamry and not just a cluster member. 

SA-6500 (7.3R3) Production
MAG 4610 (7.4) Lab
Copyright© 1999-2013 Juniper Networks, Inc. All rights reserved.